fix permission list